tocsin

Debian/ntp: medium 5.3

NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero.

Action: Upgrade ntp to 1:4.2.8p7+dfsg-1 or later.

Affected

introducedfixedlast affected
01:4.2.8p7+dfsg-1-

Fixed versions

1:4.2.8p7+dfsg-1

Sources

published · modified · JSON